1-67
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x Authentication
To disable MAC authentication bypass, use the no authentication order interface configuration
command.
This example shows how to enable MAC authentication bypass:
Switch(config-if)# authentication order
Configuring 802.1x User Distribution
Beginning in global configuration, follow these steps to configure a VLAN group and to map a VLAN
to it:
This example shows how to configure the VLAN groups, to map the VLANs to the groups, to and verify
the VLAN group configurations and mapping to the specified VLANs:
switch(config)# vlan group eng-dept vlan-list 10
switch(config)# show vlan group group-name eng-dept
Group Name Vlans Mapped
------------- --------------
eng-dept 10
switch# show dot1x vlan-group all
Group Name Vlans Mapped
------------- --------------
eng-dept 10
hr-dept 20
This example shows how to add a VLAN to an existing VLAN group and to verify that the VLAN was
added:
switch(config)# vlan group eng-dept vlan-list 30
switch(config)# show vlan group eng-dept
Group Name Vlans Mapped
------------- --------------
eng-dept 10,30
This example shows how to remove a VLAN from a VLAN group:
switch# no vlan group eng-dept vlan-list 10
Step 6
show authentication interface
interface-id
Verify your entries.
Step 7
copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose
Command Purpose
Step 1
vlan group vlan-group-name vlan-list vlan-list Configure a VLAN group, and map a single VLAN or a
range of VLANs to it.
Step 2
show vlan group all vlan-group-name Verify the configuration.
Step 3
no vlan group vlan-group-name vlan-list vlan-list Clear the VLAN group configuration or elements of the
VLAN group configuration.
To Next Page
Loading...
